Trojan.Starman.6115

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERa91c.dir00\svchost.exe.mdmp 16325836412029964

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa91c.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12.##.114.254':445
'12.#9.39.11':445
'12.#9.8.145':445
'12.##.157.61':445
'12.#9.72.84':445
'12.##.147.58':445
'12.##.69.235':445
'12.##.162.64':445
'12.##.111.178':445
'12.##.88.170':445
'12.##.119.182':445
'12.#9.2.20':445
'12.#9.19.99':445
'12.##.229.30':445
'12.##.176.129':445
'12.#9.83.35':445
'12.##.187.19':445
'12.##.21.202':445
'12.#9.4.138':445
'12.##.26.212':445
'12.##.145.51':445
'12.##.58.244':445
'12.##.20.172':445
'12.##.176.82':445
'12.##.189.41':445
'12.#9.53.60':139
'12.##.255.139':139
'12.##.161.254':139
'12.##.164.19':445
'12.##.214.51':139
'12.##.161.213':139
'12.#9.77.57':139
'12.##.185.147':139
'12.##.214.51':445
'12.##.119.67':139
'12.##.11.242':139
'12.##.32.212':139
'12.#9.168.5':445
'12.##.255.249':445
'12.##.218.13':445
'12.##.112.201':445
'12.##.193.165':445
'12.##.219.206':445
'12.##.250.14':445
'12.##.202.20':445
'12.##.26.138':445
'12.#9.39.95':445
'12.##.143.137':445
'12.##.216.187':445
'12.##.181.148':445
'12.##.254.228':445
'12.##.20.172':139
'12.##.176.82':139
'12.##.189.41':139
'12.##.229.30':139
'12.##.176.129':139
'12.#9.83.35':139
'12.#9.19.99':139
'12.##.157.61':139
'12.#9.72.84':139
'12.##.26.212':139
'12.##.145.51':139
'12.##.58.244':139
'12.#9.4.138':139
'12.##.28.228':445
'12.##.114.219':445
'12.#9.155.0':445
'12.##.63.119':445
'12.##.224.109':445
'12.##.95.224':445
'12.##.254.228':139
'12.##.187.19':139
'12.##.21.202':139
'12.#9.19.65':445
'12.##.69.243':445
'12.##.191.222':139
'12.##.143.137':139
'12.##.216.187':139
'12.##.181.148':139
'12.##.255.249':139
'12.##.218.13':139
'12.##.112.201':139
'12.#9.168.5':139
'12.##.164.19':139
'12.##.191.222':445
'12.##.202.20':139
'12.##.26.138':139
'12.#9.39.95':139
'12.##.250.14':139
'12.#9.8.145':139
'12.##.88.170':139
'12.##.119.182':139
'12.##.147.58':139
'12.##.114.254':139
'12.#9.39.11':139
'12.##.111.178':139
'12.##.193.165':139
'12.##.219.206':139
'12.#9.2.20':139
'12.##.69.235':139
'12.##.162.64':139
'12.#9.95.87':445
'12.#9.3.50':445
'12.##.69.124':445
'12.##.33.120':445
'12.##.144.18':445
'12.##.103.153':445
'12.##.191.63':445
'12.##.85.139':445
'12.##.179.160':445
'12.##.237.31':445
'12.##.104.49':445
'12.##.17.103':445
'12.##.160.116':445
'12.#9.229.8':445
'12.##.136.35':445
'12.##.235.26':445
'12.##.180.151':445
'12.#9.8.245':445
'12.##.17.133':445
'12.##.97.229':445
'12.##.222.37':445
'12.##.76.175':445
'12.##.79.223':445
'12.##.180.22':445
'12.##.121.180':445
'12.##.57.170':139
'12.##.243.57':139
'12.##.194.109':139
'12.##.94.171':445
'12.#9.7.208':445
'12.#9.170.7':139
'12.##.198.101':139
'12.##.117.232':139
'12.##.50.222':139
'12.##.120.222':139
'12.##.132.247':139
'12.##.174.157':139
'12.##.100.122':445
'12.##.221.81':445
'12.##.151.170':445
'12.#9.202.0':445
'12.##.32.237':445
'12.##.40.169':445
'12.##.82.190':445
'12.#9.141.5':445
'12.##.202.209':445
'12.##.121.251':445
'12.#9.4.50':445
'12.#9.211.4':445
'12.#9.18.23':445
'12.##.152.50':445
'12.##.79.223':139
'12.##.180.22':139
'12.##.121.180':139
'12.#9.229.8':139
'12.##.136.35':139
'12.##.235.26':139
'12.##.160.116':139
'12.##.33.120':139
'12.##.144.18':139
'12.##.97.229':139
'12.##.222.37':139
'12.##.76.175':139
'12.##.17.133':139
'12.##.161.254':445
'12.##.119.67':445
'12.##.11.242':445
'12.##.161.213':445
'12.#9.53.60':445
'12.##.255.139':445
'12.##.152.50':139
'12.##.180.151':139
'12.#9.8.245':139
'12.##.32.212':445
'12.#9.77.57':445
'12.##.185.147':445
'12.#9.4.50':139
'12.#9.211.4':139
'12.#9.18.23':139
'12.##.221.81':139
'12.##.151.170':139
'12.#9.202.0':139
'12.##.100.122':139
'12.##.94.171':139
'12.#9.7.208':139
'12.#9.141.5':139
'12.##.202.209':139
'12.##.121.251':139
'12.##.82.190':139
'12.##.69.124':139
'12.##.237.31':139
'12.##.104.49':139
'12.##.103.153':139
'12.#9.95.87':139
'12.#9.3.50':139
'12.##.179.160':139
'12.##.32.237':139
'12.##.40.169':139
'12.##.17.103':139
'12.##.191.63':139
'12.##.85.139':139
'12.#9.86.76':445
'12.#9.63.57':445
'12.##.174.121':445
'12.##.108.193':445
'12.##.153.173':445
'12.##.12.134':445
'12.##.154.244':445
'12.##.25.206':445
'12.##.88.225':445
'12.#9.17.86':445
'12.##.155.17':445
'12.##.244.154':445
'12.##.53.194':445
'12.##.15.105':445
'12.##.231.202':445
'12.#9.152.8':445
'12.##.134.74':445
'12.#9.38.95':445
'12.##.35.186':445
'12.##.13.171':445
'12.##.247.58':445
'12.##.210.221':445
'12.##.196.106':445
'12.##.209.203':445
'12.##.177.200':445
'12.##.217.75':445
'12.##.140.232':445
'12.##.113.46':445
'12.##.191.74':445
'12.##.129.218':445
'12.##.146.217':445
'12.##.50.251':445
'12.##.52.140':445
'12.#9.219.8':445
'12.##.218.83':445
'12.##.32.122':445
'12.#9.79.10':445
'12.##.72.111':445
'12.##.172.162':445
'12.#9.4.154':445
'12.##.198.187':445
'12.##.131.224':445
'12.##.21.182':445
'12.##.138.138':445
'12.##.157.139':445
'12.##.37.157':445
'12.#9.25.52':445
'12.##.20.130':445
'12.#9.54.19':445
'12.##.140.106':445
'12.##.40.199':139
'12.##.247.58':139
'12.##.108.193':139
'12.#9.86.76':139
'12.#9.152.8':139
'12.##.153.173':139
'12.##.209.203':139
'12.##.154.244':139
'12.##.25.206':139
'12.##.88.225':139
'12.#9.17.86':139
'12.##.155.17':139
'12.##.244.154':139
'12.##.174.121':139
'12.##.15.105':139
'12.#9.63.57':139
'12.##.231.202':139
'12.#9.38.95':139
'12.##.134.74':139
'12.##.35.186':139
'12.##.12.134':139
'12.##.177.200':139
'12.##.196.106':139
'12.##.53.194':139
'12.##.210.221':139
'12.##.13.171':139
'12.##.146.217':139
'12.##.140.232':139
'12.##.218.83':139
'12.##.191.74':139
'12.##.129.218':139
'12.##.217.75':139
'12.##.50.251':139
'12.##.52.140':139
'12.#9.219.8':139
'12.##.113.46':139
'12.##.32.122':139
'12.#9.79.10':139
'12.##.72.111':139
'12.##.172.162':139
'12.#9.4.154':139
'12.##.198.187':139
'12.##.131.224':139
'12.##.21.182':139
'12.##.138.138':139
'12.##.157.139':139
'12.##.37.157':139
'12.#9.25.52':139
'12.##.20.130':139
'12.#9.54.19':139
'12.##.140.106':139
'12.##.201.92':445
'12.##.167.13':445
'12.##.42.133':445
'12.#9.22.25':445
'12.##.159.108':445
'12.#9.5.249':445
'12.#9.5.41':445
'12.##.80.223':445
'12.#9.65.61':445
'12.##.125.47':445
'12.#9.18.67':445
'12.##.172.204':445
'12.##.137.38':445
'12.##.203.140':445
'12.#9.76.69':445
'12.##.87.211':445
'12.##.202.172':445
'12.##.209.70':445
'12.##.210.131':445
'12.##.19.108':445
'12.##.181.208':445
'12.##.141.34':445
'12.#9.55.54':445
'12.#9.34.24':445
'12.##.235.33':445
'12.##.224.109':139
'12.##.95.224':139
'12.##.28.228':139
'12.##.113.193':139
'12.##.38.114':139
'12.##.63.119':139
'12.##.69.243':139
'12.##.113.193':445
'12.##.38.114':445
'12.##.114.219':139
'12.#9.155.0':139
'12.#9.19.65':139
'12.##.21.155':445
'12.#9.22.28':445
'12.##.234.184':445
'12.#9.0.100':445
'12.##.228.109':445
'12.#9.97.18':445
'12.##.38.250':445
'12.#9.45.59':445
'12.##.60.122':445
'12.##.27.108':445
'12.#9.73.69':445
'12.#9.77.82':445
'12.##.231.77':445
'12.##.128.91':445
'12.#9.55.54':139
'12.#9.34.24':139
'12.##.235.33':139
'12.##.203.140':139
'12.#9.76.69':139
'12.##.87.211':139
'12.##.137.38':139
'12.#9.22.25':139
'12.##.159.108':139
'12.##.19.108':139
'12.##.181.208':139
'12.##.141.34':139
'12.##.210.131':139
'12.##.37.157':9988
'12.##.72.111':9988
'12.##.191.74':9988
'12.##.40.199':445
'12.##.53.194':9988
'12.#9.38.95':9988
'12.##.128.91':139
'12.##.202.172':139
'12.##.209.70':139
'12.##.40.199':9988
'12.##.180.124':139
'12.##.206.180':139
'12.#9.73.69':139
'12.#9.77.82':139
'12.##.231.77':139
'12.#9.22.28':139
'12.##.234.184':139
'12.#9.0.100':139
'12.##.21.155':139
'12.##.180.124':445
'12.##.206.180':445
'12.#9.45.59':139
'12.##.60.122':139
'12.##.27.108':139
'12.##.38.250':139
'12.##.42.133':139
'12.##.125.47':139
'12.#9.18.67':139
'12.#9.5.249':139
'12.##.201.92':139
'12.##.167.13':139
'12.#9.65.61':139
'12.##.228.109':139
'12.#9.97.18':139
'12.##.172.204':139
'12.#9.5.41':139
'12.##.80.223':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней